AWS Security ChangesHomeSearch

AWS AmazonCloudWatch documentation change

Service: AmazonCloudWatch · 2025-11-28 · Documentation medium

File: AmazonCloudWatch/latest/logs/WhatIsCloudWatchLogs.md

Summary

Added documentation about deletion protection feature in product overview

Security assessment

Expands product documentation to include a security control (deletion protection) but does not reference any specific security incident or vulnerability being addressed.

Diff

diff --git a/AmazonCloudWatch/latest/logs/WhatIsCloudWatchLogs.md b/AmazonCloudWatch/latest/logs/WhatIsCloudWatchLogs.md
index b3705ade7..a6d5c3ad9 100644
--- a//AmazonCloudWatch/latest/logs/WhatIsCloudWatchLogs.md
+++ b//AmazonCloudWatch/latest/logs/WhatIsCloudWatchLogs.md
@@ -34,0 +35,2 @@ CloudWatch Logs supports two _log classes_. Log groups in the _CloudWatch Logs S
+  * **Deletion protection** – A safeguard that prevents accidental deletion of log groups and their log streams. When enabled on a log group, deletion protection blocks all deletion operations until it is explicitly disabled. By default, deletion protection is not enabled. This optional feature helps protect critical operational and compliance data from unintended removal, such as log groups that contain audit data, and production application logs for troubleshooting and analysis.
+